Ilia Nikolaevich Zavialov answers questions about payments by phone number: the mistaken transfer, the friend's request and the safe account

Instant payments by phone number changed everyday money. Instead of a long account number, a person types a phone number, sees a name and presses send. The money arrives in seconds and, in most systems, cannot be pulled back.

Speed and simplicity are exactly what fraudsters need. A payment that arrives instantly and cannot be reversed is the ideal target, and a phone number is easy to obtain, to fake in a message and to attach to someone else's name.

This article answers the most common questions about fraud around payments by phone number: the mistaken transfer that has to be returned, the request from a friend whose account was taken over, the safe account, and what the name shown before sending does and does not prove.

Each answer ends with a rule that can be followed in the moment, when a message or a call is asking for a quick decision.

The questions come from the situations people describe most often after a loss. In almost every one, the victim was asked to act quickly and to keep the conversation away from the bank.

A common scheme starts with an unexpected incoming payment. Soon a message or a call follows: the sender says the transfer was a mistake and asks for the money to be returned, often to a different number or card.

The incoming money is frequently stolen from another victim. Returning it to a new recipient moves stolen funds through your account, and when the real owner complains, the bank may freeze your account and ask for explanations.

In another version, the fraudster pays from a card and then disputes the payment. You return the money by instant transfer, the card payment is reversed, and you lose the amount twice over.

The rule is simple. Do not send anything anywhere. Contact your bank through the number on your card, explain the unexpected payment and let the bank return it through its own procedure to the account it came from.

Messenger accounts are taken over through stolen codes and fake voting links. The attacker then writes to the whole contact list in the owner's name, asking for an urgent loan to a phone number or card.

The message looks familiar because it comes from a real account with real history. It usually asks for a modest amount, mentions a problem with the friend's own bank and promises to return the money tomorrow.

Voice messages add weight, and voices can now be cloned from a few seconds of recordings. A short voice note asking for help is not proof that the friend is speaking.

The rule is to call the friend on the number you already have, or ask a question only the two of you can answer. If the account was taken over, warn others in your common chats.

Watch for small inconsistencies: a friend who normally writes in one language suddenly switches, uses a formal tone or asks to be paid to a card in a stranger's name. Each of these is enough to pick up the phone before paying.

A caller introduces themselves as the bank's security team, a police officer or a regulator. They say that your money is under attack and must be moved to a safe account, which is usually a phone number or card in another person's name.

No bank and no authority moves customers' money for protection. Accounts are protected by blocking operations and replacing cards, and the money stays where it is.

The script often includes a second caller who confirms the first, and instructions to lie to the bank if it asks about the payment. Both are signs of the same scheme.

The rule: hang up and call the bank on the number printed on your card. A real security team will tell you in a minute that nobody asked you to move anything.

Most systems show the recipient's name, often shortened, before the payment is confirmed. It is a useful check against typing mistakes.

It is a weak check against fraud. The name shows who owns the account, and fraudsters use accounts of real people, called money mules, who rent out their cards or were recruited through fake job offers.

When the name does not match the story, stop. A payment to a person with a different name for a bank safe account, a tax fine or a friend's loan is the signature of the scheme.

When the name does match, keep checking. A matching name on a friend's number proves only that the number belongs to your friend. Who is writing to you from their account is a separate question.

UK Finance recorded 248,070 cases of authorised push payment fraud worth 576.4 million pounds. In these cases the victim sends the money personally, which is exactly what instant transfers to a phone number or account involve.

Sixty six percent of authorised push payment cases started online and another 17 percent through telephone networks. Purchase scams made up 71 percent of all cases.

Since 7 October 2024 banks must reimburse most authorised push payment fraud up to 85,000 pounds. In the first nine months 88 percent of reported losses were returned, and 84 percent of claims were settled within five working days.

Reimbursement does not replace caution. It depends on reporting quickly and on the bank recognising the case as fraud, and a bank may refuse where a customer ignored clear warnings before paying.

A money mule is a person who lets their account be used to receive and forward money for others. Some are recruited with job offers for payment processing, some sell access to their card, some are victims who were told to return a mistaken transfer.

The consequences land on the mule. Banks close accounts, and the person whose account received stolen money is the first one the authorities contact.

Offers to earn money by receiving transfers and passing them on are always part of such schemes, whatever they are called. Declining them protects both you and the next victim.

Young people and students are recruited most often, through social media posts offering easy money for using a bank card. Talking about it at home is as useful as any warning from a bank.

Most banking applications let you set a daily limit for instant transfers. A limit close to your real needs does not get in the way of everyday payments, and it caps what a fraudster can take in one call.

Turn on notifications for every incoming and outgoing payment. An unexpected incoming transfer is the first step of the mistaken transfer scheme, and seeing it at once gives you time to call the bank before anyone calls you.

Protect the messenger account with two step verification and a password, so that a stolen text code alone is not enough to take it over. That closes the most common route for fake loan requests from friends.

Agree with close relatives on a simple rule: requests for money in messages are always confirmed by a call. Once the rule exists, nobody is offended when you call to check.

Call your bank immediately through the number on the card or in the official application, and ask them to contact the receiving bank. For instant payments the first hour matters most.

Write down the recipient's phone number, name, the time and amount, and save the messages. The receiving account belongs to a real person, and that record is what an investigation needs.

Change the passwords of the accounts involved, and if a messenger account was taken over, restore it and warn your contacts.

Be cautious with anyone who contacts you afterwards promising to recover the money for a fee. That is the next scheme, and it targets exactly people who have just lost money.

Call your bank at once on the number on the card. Reporting quickly is what the reimbursement rules depend on.

Report the fraud to Report Fraud at reportfraud.police.uk or on 0300 123 2040, and forward scam text messages to 7726.

If a messenger account was taken over, report it to the platform and warn your contacts from another channel.

Someone sent me money by mistake and asks for it back. What do I do?

Send nothing yourself. Call your bank through the number on your card and let it return the payment through its own procedure to the account it came from.

A friend asks for a loan in a messenger. How do I check?

Call the friend on the number you already have or ask a question only the two of you can answer. A familiar account and even a familiar voice can be faked.

Does a bank ever move money to a safe account?

No. Banks protect accounts by blocking operations. A request to move money to another person's number or card is the scheme.

Does the recipient's name shown before payment prove it is safe?

It proves who owns the account. Fraudsters use accounts of real people, so a name that does not match the story is a stop sign, and a matching name is only the start of the check.

Can I get my money back in the UK?

Most authorised push payment fraud is reimbursable up to 85,000 pounds since 7 October 2024. Call your bank at once and report to Report Fraud.